Re: How can an .EXE be decoded?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


"Michael C" <mike@xxxxxxxxxx> wrote in message
news:%23mLanFOJIHA.4712@xxxxxxxxxxxxxxxxxxxxxxx
"Stefan Berglund" <sorry.no.koolaid@xxxxxx> wrote in message
news:omifj35ak2ee70srahc32jmn0bs89vibst@xxxxxxxxxx
Apparently chucking the HDD in the freezer helps (seriously!).

Michael


Well, probably not

Apparently it does. I have not tried it myself but have heard several
different people say they have and it worked.


Most magnetic materials, and I assume hard drive surfaces, are more magnetic at
cold temperatures, and less so at warm temperatures. So chilling the drive could
make the signal to noise a little better, letting you recover some data.

As Kevin pointed out, heating the drive up can cause it to lose its magnetism,
and the data with it.

The amazing part of forensic data recovery is not so much in recovering trashed
drives, but in recovering data that has been overwritten. The tracking on the
drive surface is not perfect, so traces of previous data are still present along
the edge of the current track, where they didn't get erased. Plus there is the
difference between a 1 overwritten with a 0, and a 0 overwritten with a 0, the
first being slightly less 0-ish that the second, so to speak. One author claimed
that in principle, there are traces of everything ever written on a drive, if
you have the tools and the patience to winnow it out.


.

Relevant Pages

  • Re: Advice regarding servers and Wiping Drives after testing
    ... there is no more readable shadow data. ... > Subject: Re: Advice regarding servers and Wiping Drives after testing ... > overwriting the media with zeroes there may be some residual magnetism ... drive would let you read its previous states at normal drive access ...
    (Security-Basics)
  • Re: Advice regarding servers and Wiping Drives after testing
    ... > Subject: Re: Advice regarding servers and Wiping Drives after testing ... >> I see osx disk utility can with write zeros once, ... > overwriting the media with zeroes there may be some residual magnetism ... drive would let you read its previous states at normal drive access ...
    (Security-Basics)
  • Re: How can an .EXE be decoded?
    ... magnetic at cold temperatures, and less so at warm temperatures. ... magnetism, ... The amazing part of forensic data recovery is not so much in recovering ... trashed drives, but in recovering data that has been overwritten. ...
    (microsoft.public.vb.general.discussion)
  • Re: Mac Hard Drive... any help please? email me thedude1926@live.com OR lia_rahimi@live.com
    ... with the IDE/Sata to USB cable... ... recovering data from a crashed pc drive is *not* easy if there's ... macs use sata drives and previously ata/ide drives. ...
    (comp.sys.mac.hardware.storage)
  • Re: Raw Hard Drive
    ... module just for recovering information from a drive that is reading as RAW. ... some drives that are still in use 2 1/2 years after doing this procedure. ... The drive has lost it's partition structure or it's partition "type". ... Look for the file system that you KNOW was being used. ...
    (microsoft.public.windowsxp.hardware)